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IN THE CLAIMS 

Following are the claims as amended herein subsequent to the Amendment filed on April 
18, 2005, and as are currently pending for consideration: 

1-3. (Canceled) 

4. (Previously Presented) A computer software product including one or more 
recoidabJe media having executable instructions stored thereon which, when executed 
by a processing device, causes the processing device to: 

initialize a symbolic simulation relation for an assertion graph on a first symbolic 
lattice domain, wherein the assertion graph on the first symbolic lattice domain is 
configurable to express a justification property to verify by computing the symbolic 
simulation reJation. 

5. (Original) The computer software product recited in Claim 4 which, when executed 
by a processing device, further causes the processing device to: 

compute the symbolic simulation relation for the assertion graph on the first 
symbolic lattice domain; and 

check the symbolic simulation relation to verify a plurality of properties expressed 
by a plurality of assertion graph instances, having at least one assertion graph instance 
on a second lattice domain different from the first symbolic lattice domain. 

6-7. (Canceled) 
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8. (Previously Presented) A computer software product including one or more 

recordable media having executable instructions stored thereon which, when executed 
by a processing device, causes the processing device to: 

initialize a symbolic simulation relation for an assertion graph on a first symbolic 
lattice domain; and 

compute the symbolic simulation relation for the assertion graph on the first 
symbolic lattice domain to verify the assertion graph according to a normal 
satisfiability criteria. 

9-13. (Canceled) 

14. (Previously Presented) A method comprising: 

initializing a symbolic simulation relation for an assertion graph on a first 
symbolic lattice domain, wherein the assertion graph on the first symbolic lattice 
domain is configurable to express a justification property to verify through computing 
the symbolic simulation relation. 

15. (Original) The method recited in Claim 14 further comprising: 

computing the symbolic simulation relation for the assertion graph on the first 
symbolic lattice domain; and 

checking the symbolic simulation relation to verify a plurality of properties 
expressed by a plurality of corresponding assertion graph instances, having at least 
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one assertion graph instance on a second lattice domain different from the first 
symbolic lattice domain. 

16. (Original) A method comprising: 

specifying a justification property with an assertion graph. 

17. (Original) The method recited in Claim 16 wherein the assertion graph is on a first 
symbolic lattice domain; and the justification property is expressed by one of a 
plurality of instances of the assertion graph, at least one assertion graph instance on a 
second lattice domain different from the first symbolic lattice domain. 

18. (Original) The method recited in Claim 17 further comprising: 

computing a symbolic simulation relation for the assertion graph on the first 
symbolic lattice domain; and 

checking the symbolic simulation relation with a symbolic consequence labeling 
for the assertion graph on the first symbolic lattice domain according to a normal 
satisfiability criteria. 

19-27. (Canceled) 

28. (Presently Amended) Th e verification system of Claim 27 further A verification 
System comprising: 

means for initializing a symbolic simulation relation for an assertion graph on a 
first symbolic lattice domain, wherein the assertion graph on the first symbolic lattice 
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domain is configurable to express a justification property to verify through computing 
the svmboJic simulation relation; 

means for computing the symbolic simulation relation for the assertion graph on 
the first symbolic lattice domain; and 

means for checking the symbolic simulation relation to verify a plurality of 
properties expressed by a plurality of corresponding assertion graph instances, having 
at least one assertion graph instance on a second lattice domain different from the first 
symbolic lattice domain. 

29-30. (Canceled) 
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IN THE CLAIMS 

Following are the claims as amended herein subsequent to the Amendment filed on 
September 9, 2004, and as are currently pending for consideration: 

1-3. (Canceled) 

4. (Presently Amended) The oomputor software) produot rooitod in Claim 1 A computer 
software product including one or more recordable media having executable 
instructions stored thereon which, when executed by a processing device, causes the 
processing device to: 

initialize a symbolic simulation relation for an assertion graph on a first symbolic 
lattice domain, wherein the assertion graph on the first symbolic lattice domain is 
configurable to express a justification property to verify by computing the symbolic 
Simulation relation. 

5. (Original) The computer software product recited in Claim 4 which, when executed 
by a processing device, further causes the processing device to: 

compute the symbolic simulation relation for the assertion graph on the first 
symbolic lattice domain; and 

check the symbolic simulation relation to verify a plurality of properties expressed 
by a plurality of assertion graph instances, having at least one assertion graph instance 
on a second lattice domain different from the first symbolic lattice domain. 
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6-7. (Canceled) 

8. (Presently Amended ) Tho computer s oftwar e product r e cited - ia Claim 1 A computer 
software product including one or more recordable media having executable 
instructions stored thereon which, when executed by a processing device, further 
causes the processing device to: 

initialize a symbolic simulation relation for an assertion graph on a first symbolic 
lattice domain: and 

compute the symbolic simulation relation for the assertion graph on the first 
symbolic lattice domain to verify the assertion graph according to a normal 
satisfiability criteria. 

9-13. (Cauceled) 

14. (Presently Amended) The method r e cit e d in Claim 9 A method comprising: 

initializing a symbolic simulation relation for an assertion graph on a first 
symbolic lattice domain, wherein the assertion graph on the first symbolic lattice 
domain is configurable to express a justification property to verify through computing 
the symbolic simulation relation. 

15. (Original) The method recited in Claim 14 further comprising: 

computing the symbolic simulation relation for the assertion graph on the first 
symbolic lattice domain; and 

checking the symbolic simulation relation to verify a plurality of properties 
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expressed by a plurality of corresponding assertion graph instances, having at least 
one assertion graph instance on a second lattice domain different from the first 
symbolic lattice domain. 

16. (Original) A method comprising: 

Specifying a justification property with an assertion graph. 

17. (Original) The method recited in Claim 16 wherein the assertion graph is on a first 
symbolic lattice domain; and the justification property is expressed by one of a 
plurality of instances of the assertion graph, at least one assertion graph instance on a 
second lattice domain different from the first symbolic lattice domain. 

18. (Original) The method recited in Claim 17 further comprising: 

computing a symbolic simulation relation for the assertion graph on the first 
symbolic lattice domain; and 

checking the symbolic simulation relation with a symbolic consequence labeling 
for the assertion graph on the first symbolic lattice domain according to a normal 
satisfiability criteria. 

19-27. (Canceled) 

28. (Presently Amended) The verification system of Claim 27 further A verification 
system comprising: 

means for initializing a symbolic simulation relation for an assertion graph on a 
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first symbolic lattice domain, wherein the assertion graph on the first symbolic lattice 
domain is configurable to express a justification property to verify through computing 
the symbolic simulation relation: 

means for computing the symbolic simulation relation for the assertion graph on 
the first symbolic lattice domain; and 

means for checking the symbolic simulation relation to verify a plurality of 
properties expressed by a plurality of corresponding assertion graph instances, having 
at least one assertion graph instance on a second lattice domain different from the first 
symbolic lattice domain. 

29-30. (Canceled) 
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